End of Python 2.4-2.6 and 3.1-3.3 support
Ned Deily
nad at acm.org
Sun Oct 12 15:15:24 PDT 2014
In article
<CAPSkSp+doUkdFf9NH4KpcJtc-XdVTuTfD6iFJ+Sr+LgGsZpDOQ at mail.gmail.com>,
Alex Tomkins <tomkins at darkzone.net> wrote:
> However could the 3.2 and 3.3 ports be reconsidered?
>
> 3.2 is supported until February 2016 -
> http://legacy.python.org/dev/peps/pep-0392/
> 3.3 is supported until September 2017 -
> http://legacy.python.org/dev/peps/pep-0398/
For some value of supported: both 3.2.x and 3.3.x are now in upstream's
security-fix-only mode which means they only receive fixes that fix
"issues exploitable by attackers such as crashes, privilege escalation
and, optionally, other issues such as denial of service attacks. Any
other changes are not considered a security risk and thus not backported
to a security branch." In particular, 3.2.x and 3.3.x are not tested or
updated upstream (e.g. by python-dev) to support new operating system
releases or any other kind of bugs other than those that meet the
security criteria above. Downstream distributors like MacPorts are, of
course, free to provide whatever level of additional support they deem
fit, like backporting fixes but, especially for Python 3, there are lots
of good reasons to use the most recent release.
--
Ned Deily,
nad at acm.org
More information about the macports-users
mailing list